{"action":"Upgrade sequelize to 6.37.4 or later.","affected":[{"fixed":"6.37.4","introduced":"0"}],"component":"sequelize","cve_ids":["CVE-2026-69240"],"ecosystem":"npm","epss":0.0054,"exploited":false,"fixed_versions":["6.37.4"],"ghsa_id":"GHSA-v8fg-2rw7-q452","id":"tcs_01M5KGB8DKGEAN7NXVMFJ8R7SE","modified_at":"2026-08-03T20:56:43.986253Z","published_at":"2026-08-03T20:29:50Z","references":["https://osv.dev/vulnerability/GHSA-v8fg-2rw7-q452","https://github.com/sequelize/sequelize/security/advisories/GHSA-v8fg-2rw7-q452","https://github.com/sequelize/sequelize/commit/5deadd2410ae9136a21fb652db206d27bb715f26","https://github.com/sequelize/sequelize","https://github.com/sequelize/sequelize/releases/tag/v6.37.4"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-v8fg-2rw7-q452","url":"https://osv.dev/vulnerability/GHSA-v8fg-2rw7-q452"}],"summary":"Sequelize: SQL Injection (Oracle DB)"}